NVD

Id
17115  
Name
CVE-2016-0733  
Description
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-12  
Modified Date
2016-04-18  
Seq
2016-0733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
94966 17115 CVE-2016-0733 82871  View
94967 17115 CVE-2016-0733 https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger  View
94968 17115 CVE-2016-0733 https://issues.apache.org/jira/browse/RANGER-835  View
94969 17115 CVE-2016-0733 [ranger-dev] 20160205 CVE update (CVE-2015-5167 & CVE-2016-0733) - Fixed in Ranger 0.5.1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1349 JVNDB-2016-002122 Apache Ranger の Admin UI における認証を回避される脆弱性 Apache Ranger の Admin UI は、パスワードを欠く認証リクエストを適切に処理しないため、認証を回避される脆弱性が存在します。 CVE-2016-0733 86937 CVE-2016-0733 17115 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002122.html 2016-02-05 2016-04-20 View